Hello Michael Ho, Dan Burkert, Philip Zeyliger, I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/9060 to look at the new patch set (#6). Change subject: IMPALA-6418: Find a reliable way to detect supported TLS versions ...................................................................... IMPALA-6418: Find a reliable way to detect supported TLS versions Due to a RHEL bug, finding the version of the dynamically linked OpenSSL is unreliable on certain RHEL platforms. This means that if Impala is built against OpenSSL 1.0.0 and run against OpenSSL 1.0.1, due to the bug, Impala will not be able to access the capabilities of OpenSSL 1.0.1. The most significant drawback of this is that in this scenario, Impala cannot use TLSv1.2, even though it is available. The RHEL bug: https://bugzilla.redhat.com/show_bug.cgi?id=1497859 This patch imitates Kudu's way of determining what TLS versions are supported via this patch: https://github.com/apache/kudu/commit/b88117415a02699c12a6eacbf065c4140ee0963c This is tested and works on all supported platforms of Impala. Change-Id: Idd40219b7be5889b3c24457acdb79a28bdcd9bfb --- M be/src/rpc/thrift-client.cc M be/src/rpc/thrift-server.cc M be/src/util/openssl-util.cc M be/src/util/openssl-util.h 4 files changed, 45 insertions(+), 12 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/60/9060/6 -- To view, visit http://gerrit.cloudera.org:8080/9060 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newpatchset Gerrit-Change-Id: Idd40219b7be5889b3c24457acdb79a28bdcd9bfb Gerrit-Change-Number: 9060 Gerrit-PatchSet: 6 Gerrit-Owner: Sailesh Mukil <sail...@cloudera.com> Gerrit-Reviewer: Dan Burkert <d...@cloudera.com> Gerrit-Reviewer: Michael Ho <k...@cloudera.com> Gerrit-Reviewer: Philip Zeyliger <phi...@cloudera.com> Gerrit-Reviewer: Sailesh Mukil <sail...@cloudera.com>